AMENDMENTS TO THE CLAIMS: 



1. (Currently Amended) A method of managing risk related to a successful 
completion of a development project, comprising: 

storing a probability of occurrence (Pf) table having a plurality of risk categories 
for the development project, each said category having a plurality of table entries 
corresponding to different numeric Pf ratings , each entry including a category-specific 
standardized qualitative probability definition associated with a the Pf rating and a 
severity of consequence (Cf) table, and identified risks in a shared risk database; and 

via a wob browser, a plurality of users providing a risk management tool 
implemented on a computer , said tool 

providing an interface to formulate formulating an enterprise search of the 
risk database and performing the search to identify at least one risk;- 

viowing for each identified risk, displaying the Pf tabic to prompt a user to 
select the one or more risk categories for said at least one risk and for each said selected 
category selects to select the qualitative probability definition that characterizes the risk 
thereby specifying a probability of occurrence Pf for each said selected risk category for 
said at least one risk; and 

viewing for each identified risk, displaying the Cf table to prompt the user 
to select at least one a severity of consequence Cf for said at least one risk , said tool 
combining the selected Pf and Cf being combined and ranked to define calculate a 
prioritized risk factor factors Rf for each identified risk ; 

formulating a risk mitigation plan including at least one mitigation activity for 
said at least one risk, said tool calculating risk mitigation plan having an associated risk 
exposure for said risk mitigation plan based on the probability of occurrence Pf and 
severity of consequence Cf risk factors Rf for said at least one risk; 

performing the at least one mitigation activity for said at least one risk to 
implement the risk mitigation plan; 
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as the risk mitigation plan is implemented over time, at least one said user 
viewing said tool displaying t he Pf and Cf tables to prompt a user to reassess the at least 
one risk- and select Pf and C f, said tool updating and update the prioritized risk factor Rf; 

said tool recalculating the risk exposure for the updated risk factors and 
displaying a chart of the r isk exposure ever versus t ime as mitigation activities are 
performed and risk factors updated ; and 

adjusting the mitigation plan based on the risk exposure. 

2. (Currently Amended) The method of claim 1, wherein the severity of 
consequence table has cost and schedule impact categories, each said category having a 
plurality of table entries, each entry including a standardized qualitative impact definition 
and a project-specific amount associated with a Cf rating, whoroin the said tool 
displaying the severity of consequence table to prompt users to view the cost and 
schedule impact categories and the standardized qualitative impact definitions for each 
said at least one risk and to select the Cf rating, said tool calculating and displaying the 
displayed risk exposure including a cost exposure and a schedule exposure that are based 
on the project-specific amounts associated with the selected Cf rating. 

3. (Currently Amended) The method of claim 1, further comprising a user having 
administrative access not provided to said a plurality of users , said tool prompting the 
user to first tailor tailoring the probability of occurrence table via the web browser to 
select a reduced number of categories that are relevant to the current development project 
and -, said tool storing the tailored probability of occurrence table on the shared risk 
database with access to said plurality of users. 

4. (Currently Amended) The method of claim 2, wherein the table entries in the 
schedule impact category specify a project-specific amount in days, weeks or months and 
the table entries in the cost impact category include multiple sub-categories of project- 
specific cost impacts in actual dollars for the development project, said tool prompting 
the user selecting to select a Cf rating for each said sub-categor y, said tool calculating 
and displaying the scheduled-exposure cost-exposure for all risks . 



3 



5. (Currently Amended) The method of claim 2, wherein said multiple sub- 
categories include development cost (NRE), unit cost (DTC) and operations and support 
(O/S) categories, said tool calculating and displaying the displayed cost exposure 
including sub categories for for NRE, DTC and O/S. 

6. (Currently Amended) The method of claim 4, further comprising a user having 
administrative access not provided to said plurality of users , said tool first prompting the 
user to tailor tailoring the severity of consequence table to select the cost impact sub- 
categories and specify their dollar amounts and to specify the schedule impact in days, 
weeks or months for the current development project , said tool and storing the tailored 
probability of occurrence table on the shared risk database with access to said plurality of 
users. 

7. (Original) The method of claim 1, wherein the enterprise search includes a 
combination of at least two parameters including current or historic, risk factor, vendor, 
component, functional area, category, key work in risk title, key work in risk description, 
IPT, actionee, actionee/team lead/submitter or risk number. 

8. (Original) The method of claim 7, wherein the enterprise search results list at 
least one risk including a combination of risk number, program, risk title and a current 
risk factor. 

9. (Currently Amended) The method of claim 29, wherein the tool web browser 
provides a transfer link from said at least one risk with its risk mitigation plan to import 
the selected risk and mitigation plan into another program. 

10. (Currently Amended) The method of claim 29, wherein in the mitigation search 
performed by the tool includes a combination of at least two parameters including a risk 
description, risk status, start date, original planned complete date, planned complete date 
and complete date. 
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11. (Currently Amended) The method of claim 29, further including said tool 
automatically generating risk reports including identified risks, prioritized risk factors 
and mitigation plans. 

12. cancelled 

13. (Currently Amended) The method of claim 29, wherein the tool supports a web 
browser has having an interface that includes a menu bar with pull-down menu items and 
menu sub-items for viewing the current program, conducting the enterprise search and 
conducting the mitigation search and hyperlinks to the Pf and Cf tables. 

14-18. cancelled 

19. (Currently Amended) A web-based risk management system for managing risk 
related to a successful completion of a development project, comprising: 

a server comprising a shared risk database that stores a probability of occurrence 
(Pf) table having a plurality of risk categories for the development project, each said risk 
category having a plurality of table entries corresponding to different numeric Pf ratings , 
each entry including a category-specific standardized qualitative probability definition 
associated with a the Pf ratings and a severity of consequence (Cf) table, risk 
identification information and risk mitigation information in a shared risk database; 

a web-based risk management tool on the server that provides standardized 
interfaces for searching, viewing and entering information to and from the shared risk 
data base via a web browser; 

a communications network; and 

a plurality of computer workstations in communication with the server via the 
communications network, each said workstation provided with a web browser to search 
the database using the standardized interfaces to identify , said tool identifying risks and 
risk categories for each identified risk, said tool displaying the Pf and Cf tables to prompt 
a user t o select an entry and its Pf rating from the Pf table for each risk category and an 
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entry and its Cf rating from the Cf table and to calculate and prioritize said tool 
calculating a risk factor Rf for each risk based on the Pf and Cf ratings. 

20. (Previously Presented) The system of claim 34, wherein the tool's standardized 
interface includes a menu bar with pull-down menu items and menu sub-items to view 
the current programs, to view program risks, to conduct an enterprise search to identify 
risks and to formulate the risk mitigation search to identify mitigation plans and 
hyperlinks to the Pf and Cf tables. 

21 . (Currently Amended) The system of claim 19, wherein the Cf table has a schedule 
impact category with table entries, each entry including a standardized qualitative impact 
definition and a project-specific schedule impact amount in days, weeks or months and 
having a cost impact category with table entries, each entry including a standardized 
qualitative impact definition and project-specific cost impact amounts for multiple sub- 
categories of cost impacts in actual dollars for the development project, said web browser 
providing administrative access to at least one user to tailor using said tool the Pf table to 
have fewer categories that are relevant to the current project and the Cf table to specify 
the amounts in days, weeks or months of the table entries in the schedule impact category 
and the amounts in actual dollars for the multiple sub-categories in the cost impact 
category, said wob browser providing access to tool prompting via the web-browser a 
user to select Cf ratings for each of the schedule impact and the multiple sub-categories 
of cost impacts, said risk management tool computing and displaying a schedule 
exposure based on Pf and the Cf rating for schedule impact and a cost exposure for each 
sub-category based on Pf and the Cf rating for each said sub-category. 

22. (Previously Presented) The system of claim 34, wherein the workstation via the 
web browser submits an enterprise search that includes a combination of at least two 
parameters including current or historic, risk factor, vendor, component, functional area, 
category, key word in risk title, key word in risk description, IPT, actionee, actionee/team 
lead/submitter or risk number and the server returns via the web browser an enterprise 
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search results list including for at least one risk a combination of risk number, program, 
risk title, a current risk factor and its risk mitigation plan. 

23. (Previously Presented) The system of claim 34, wherein the workstation via the 
web browser submits a mitigation search that includes a combination of at least two 
parameters including a risk description, risk status, start date, original planned complete 
date, planned complete date and complete date and the server returns existing mitigation 
plans that satisfy the search parameters. 

24-28 cancelled 

29. (Currently Amended) The method of claim 1, wherein existing risk mitigation 
plans including one or more mitigation activities for different risks are stored in the 
shared database, the formulation of the risk mitigation plan plane comprising: 

said tool prompting a user to formulate formulating a mitigation search of the risk 
database and performing the search to identify existing risk mitigation plans for the 
identified risk; 

said tool prompting a user to formulate formulating a new risk mitigation plan 
that's builds upon the one or more existing risk mitigation plans; and 

said tool storing the new risk mitigation plan on the shared database. 

30. (Currently Amended) The method of claim 29, wherein the tool mitigation search 
identifies both successful and unsuccessful existing risk mitigation plans. 

3 1 . (Currently Amended) The method of claim 29, further comprising: 

said tool aggregating the risk mitigation plans from a plurality of different users 
and different programs to update and store a risk mitigation plan on the shared database. 

32. (Previously Presented) The method of claim 29, further comprising: 
sharing resources with other programs to implement the mitigation plan. 
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33. (Previously Presented) The method of claim 29, where the risk mitigation plan 
includes a number of activities, each activity including a description and an assigned Pf 
and Cf rating. 

34. (Currently Amended) The system of claim 19, wherein existing risk mitigation 
plans including mitigation activities for different risks are stored in the shared database, 
said tool via said w eb browser configured provides an interface for the user to formulate 
and perform a mitigation search of the risk database to identify existing risk mitigation 
plans for the identified risk, formulate a new risk mitigation plan that builds upon the one 
or more existing risk mitigation plans, store the new risk mitigation plan on the shared 
database, said risk mitigation plan having tool calculating an associated risk exposure for 
all identified risks based on the Pf and Cf ratings risk factors Rf , displa ying a chart of 
risk exposure over time and facilitate facilitating adjustments to the mitigation plan based 
on the risk exposure. 

35. (Previously Presented) The system of claim 34, wherein the mitigation search 
identifies both successful and unsuccessful existing risk mitigation plans. 

36. (Previously Presented) The system of claim 34, wherein the web browser 
facilitates sharing resources with other programs to implement the mitigation plan. 

37. (Currently Amended) The method of claim 1, wherein the tool calculates the 
risk exposure is as the sum of severity of consequence associated with the Cf rating 
multiplied by the probability Pf for each said risk. 



38. (Currently Amended) The method of claim 2, wherein the user selects a Cf 
rating for each of the cost and schedule impact categories, said tool using the respective 
Cf ratings used to determine the displayed cost exposures and schedule exposure. 



39. (Currently Amended) The method of claim 38, wherein the tool calculates the 
product of the maximum Cf rating is combined with the maximum Pf to define the 
prioritized risk factor Rf. 

40. (Currently Amended) The method of claim 5, wherein the user selects a Cf 
rating for each of the NRE, DTC and O/S cost impact sub-categories, said tool uses the 
respective CF ratings used to determine the displayed cost exposure for the different sub- 
categories. 

41. (Currently Amended) A web-based risk management system for managing risk 
related to a successful completion of a development project, comprising: 

a server comprising a shared risk database that stores a probability of occurrence 
(Pf) table having a plurality of risk categories for the development project, each said risk 
category having a plurality of table entries corresponding to different numeric Pf ratings , 
each entry including a category-specific standardized qualitative probability definition 
associated with a Pf rating and a severity of consequence (Cf) table having cost and 
schedule impact categories each having a plurality of table entries, each entry including a 
standardized qualitative impact definition and a project-specific amount associated with a 
Cf rating, risk identification information and risk mitigation information; 

a web-based risk management tool on the server that provides standardized 
interfaces for searching, viewing and entering information to and from the shared risk 
data base via a web browser; 

a communications network; and 

a plurality of computer workstations in communication with the server via the 
communications network, each said workstation provided with a web browser configured 
to search the database using the standardized interfaces to identify , said tool identifying 
risks and risk categories for each identified risk, said tool displaying the Pf and Cf tables 
to prompt a user to select a Pf rating for each risk category and cost and schedule Cf 
ratings, calculate and prioritize said tool calculating a risk factor Rf as the product of the 
highest selected Pf rating and the highest selected Cf for each risk based on the Pf and Cf 
ratings^ and said tool executing a mitigation search t o formulate a risk mitigation plan 
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including at least one mitigation activity for said at least one risk, said tool calculating 
risk mitigation plan having an associated cost exposure and schedule exposure for the 
identified risks b ased on the Pf and Cf ratings, 

as the risk mitigation plan is implemented over time, said tool via the web- 
browser configured to display displaying a chart of the cost exposure and schedule 
exposure over time, displaying the Pf and Cf tables to prompt a user to r eassess the at 
least one risk and select Pf and Cf to update the prioritized risk factors Rf and adjust the 
mitigation activities p lan based on the cost or schedule exposure. 

42. (Currently Amended) The system of claim 41 , wherein the cost impact category 
includes multiple sub-categories each having a project-specific amount, each said sub- 
category being assigned its own Cf ratings, said tool using the respective CF ratings used 
to determine the displayed cost exposure for the different sub-categories. 

43. (Previously Presented) The system of claim 42, wherein the sub-categories 
include development cost (NRE), unit cost (DTC) and operations and support (O/S). 

44. (Currently Amended) The system method of claim 1 44, wherein the Cf tabic 
includes cost and schedule impact categories each having a plurality of table entries, each 
entry including a standardized qualitative impact definition and an amount associated 
with a CF rating, for each identified risk the tool prompts the user to select both a cost 
and a schedule Cf rating, for each identified said tool combining the maximum Cf rating 
for the multiple sub categories is combined with the maximum Pf for the one or more 
risk categories to define the prioritized risk factor Rf. 

45. (New) The system of claim 19, wherein the severity of consequence (Cf) table 
includes cost and schedule impact categories each having a plurality of table entries, each 
entry including a standardized qualitative impact definition and a project- specific amount 
associated with a Cf rating, said tool prompting the user to select both a cost and schedule 
CF rating and calculating the risk factor RF as the product of the highest selected Pf and 
the highest selected Cf for each identified risk. 
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46. (New) A method of managing risk related to a successful completion of a 
development project, comprising: 

storing a probability of occurrence (Pf) table having a plurality of risk categories 
for the development project, each said category having a plurality of table entries 
corresponding to different numeric Pf ratings, each entry including a category-specific 
standardized qualitative probability definition associated with the Pf rating and a severity 
of consequence (Cf) table having cost and schedule impact categories each having a 
plurality of table entries, each entry including a standardized qualitative impact definition 
and a project-specific amount associated with a Cf rating, and identified risks in a shared 
risk database; and 

providing a risk management tool on a computer server, said tool via a 
web-browser on computer workstations, 

providing an interface to prompt a user to formulate an enterprise search 
of the risk database and performing the search to identify a plurality of risks, 

for each identified risk, displaying the Pf table to prompt a user to select 
an entry and its Pf rating from the Pf table for a plurality of risk categories; 

for each identified risk, displaying the Cf table to prompt the user to select 
an entry and its Cf rating from the Cf table for said cost and schedule impact categories; 

for each identified risk, calculating a risk factor Rf as the product of the 
highest selected Pf and the highest selected Cf; and 

ranking the identified risks based on their risk factors Rf. 

47. (New) The method of claim 46, wherein the Pf table categories comprise at least 
technology, hardware, requirements, testing, software and producibility, said tool 
displaying the Pf table to prompt the user to select a Pf rating for each of said technology, 
hardware, requirements, testing, software and producibility categories. 



11 



